[libvirt] [PATCH V10 0/7] Add DHCP snooping support to nwfilter

[dennis jenkins]

On Mon, Apr 16, 2012 at 2:33 PM, dennis jenkins <dennis.jenkins.75 at gmail.com
> wrote:

> On Mon, Apr 16, 2012 at 2:22 PM, Stefan Berger <stefanb at linux.vnet.ibm.com
> > wrote:
>
>> **
>> On 04/16/2012 03:12 PM, dennis jenkins wrote:
>>
>> On Mon, Apr 16, 2012 at 10:08 AM, Stefan Berger <
>> stefanb at linux.vnet.ibm.com> wrote:
>>
>>> This series of patches adds DHCP snooping support to libvirt's
>>> nwfilter subsystem.
>>>
>>>
>> Stefan, David,
>>
>>    Thank you very much for this functionality.  As a side-effect, it
>> solves a problem that I needed addressed: namely, to know via Sys-Virt, the
>> IP address associated with a virtual machine (without having to grovel
>> through the DHCP lease file, out of band).
>>
>>
>> Dennis,
>>
>>   that's great to hear. Did you test them?
>>
>>   Stefan
>>
>>
> Not yet.  I run Gentoo Linux, and I try to keep my system really clean by
> not having manually installed packages.  However, if you would like some
> independent testing, I can tinker with it.  I have to figure out the ins
> and outs of GIT first, though.  I do my own stuff with SVN and have not
> learned git yet.
>
> The latest libvirt in Gentoo is version "0.9.10-r4".  Ignoring the "-r4",
> 9.10 is about 2 months old, correct?  So I might be waiting a while for
> this patch to make it to my portage tree.
>
> Is there a specific git command line that I should use to pull a specific
> libvirt code set, or should I just go for the head / bleeding edge?
>
> Stefan,

   There is a potential bug [1] in the Gentoo package that tracks the
libvirt git repository.  I will wait a few days for the Gentoo folks to
sort it out.  If not, I will remove the Gentoo libvirt package and install
the latest from git manually.  I intend to test this feature and provide
feedback for you.  Again, thank you for this feature.  I understand that
your implementation is to address a network security concern.

    I intend to expand to apache/mod_perl/Sys-Virt/libvirt management tool
to concurrently monitor QEMU and LXC.  It would be nice if I could get the
IP address for each virtual system in a uniform way.  I do not know if this
is a feasible feature to request.  I will already have to work around the
differences between QEMU and LXC in code, so this isn't a huge deal.  Just
a suggestion for a possible future feature.

[1] http://forums.gentoo.org/viewtopic-p-7015930.html#7015930
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/libvir-list/attachments/20120417/9b99fbbc/attachment-0001.htm>